The US Justice Department on Thursday charged two Russian citizens, Maksim Yakubets and Igor Turashev, for developing, operating, and distributing the Dridex banking malware. The DOJ names Yakubets as the leader of a criminal group called "Evil Corp," which is responsible for stealing more than $100 The charges come as the result of collaboration between the UK's National Crime Authority and NCSC, working alongside the US FBI. The US State Department announced a $5 million reward for information leading to Yakubets's arrest, and the US Treasury Department issued sanctions against nine members of Evil Corp, six entities linked to the group, and eight individuals who served as “financial facilitators” for the cybercriminals. Treasury Secretary Steven Mnuchin said the "goal is to shut down Evil Corp, deter the distribution of Dridex, target the “money mule” network used to transfer stolen funds, and ultimately to protect our citizens from the group’s criminal activities."
A Federal judge in Cleveland issued heavy sentences for two Romanian hackers on Friday, Cleveland.com reports. Bogdan Nicolescu was sentenced to twenty years in federal prison, while his colleague Radu Miclaus received eighteen years. The two men were members of the "Bayrob" group, which ran an enormous botnet and launched a wide variety of sophisticated fraudulent schemes.
Facebook filed a lawsuit against a Chinese advertising company that allegedly violated the social media platform's ad policies over the course of three years. Facebook says the company used malware to compromise Facebook users' accounts and then used those accounts to host ads for counterfeit products. The company was able to continue the scheme for so long by using a technique known as “cloaking,” which hid the destination of the ads from Facebook’s systems. Threatpost says the company hacked "hundreds of thousands" of accounts, and Facebook paid four million dollars to reimburse the victims whose accounts were abused. Rob Leathern, Facebook’s director of product management for business integrity, told BuzzFeed that the lawsuit is intended to “create consequences for these folks outside of shutting down their ad accounts and preventing them from using the platform.”